From 1a8e1a2677b5bfe65206818c55ebbe29817dcb77 Mon Sep 17 00:00:00 2001
From: Filip Marek <filip.marek.external@worldline.com>
Date: Thu, 15 Aug 2024 15:09:29 +0200
Subject: [PATCH] add escape html for description

---
 data/web/js/site/user.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/data/web/js/site/user.js b/data/web/js/site/user.js
index c1a680805..2a5eccdf8 100644
--- a/data/web/js/site/user.js
+++ b/data/web/js/site/user.js
@@ -205,7 +205,10 @@ jQuery(function($){
         {
           title: lang.description,
           data: 'description',
-          defaultContent: ''
+          defaultContent: '',
+          render: function (data, type) {
+            return escapeHtml(data);
+          }
         },
         {
           title: lang.alias_valid_until,